Reinforce PL-900 concepts with active-recall study cards covering all 5 blueprint domains. Each card shows the question on the front and the correct answer with a full explanation on the back.
Flashcards work through active recall — the process of retrieving information from memory rather than passively re-reading it. Research consistently shows that active recall produces stronger, longer-lasting memory than re-reading study guides. For PL-900 preparation, this means flashcards are one of the highest-return study tools available.
Attempt recall first
Read the PL-900 question on each card, pause, and attempt to formulate the answer in your own words before revealing. This retrieval attempt — even if wrong — dramatically strengthens memory compared to immediately reading the answer.
Review wrong cards again
When you get a card wrong, note it and add it back to your review pile. Spaced repetition — seeing difficult cards more frequently — is the mechanism that makes flashcard study far more efficient than linear reading.
Study by domain
Group your PL-900 flashcard sessions by domain for the first 3–4 weeks. Master one domain before moving to the next. In the final week, shuffle all cards together to test cross-domain recall — which is what the real PL-900 exam requires.
Short sessions beat marathon reviews
20–30 flashcard cards per session, done daily, produces better retention than a single 200-card marathon session. Five short daily sessions per week over 4 weeks gives you over 400 total card reviews — enough to reliably pass PL-900.
Sample cards from the PL-900 flashcard bank. Read the question, think of the answer, then read the explanation below.
A retail company uses Power Apps to build a mobile app for store managers to approve discount requests. The app must work offline and sync when connected. Which type of app should the developer choose?
Canvas app
Canvas apps are the correct choice because they support offline capability by leveraging the Power Apps offline sync feature, which allows data to be cached locally on the device and synchronized with the data source (e.g., Dataverse or SharePoint) when connectivity is restored. This makes them ideal for mobile scenarios like store managers approving discount requests in areas with intermittent connectivity.
A healthcare organization needs a Power Apps app to track patient visit data. The data must be stored in Microsoft Dataverse, and the app should automatically generate a timeline of visits for each patient. Which app type is most suitable?
Model-driven app
A model-driven app is the most suitable choice because it is designed for complex, data-centric business applications that require rich relational data modeling, automated business logic, and built-in timeline controls. Dataverse provides the underlying relational storage, and model-driven apps natively support timeline components that automatically aggregate and display patient visit records in chronological order without custom development.
A company has a canvas app that uses a SharePoint list as its data source. The app works fine for most users but a few users report that they cannot submit new items. They receive a generic 'Access denied' error. What is the most likely cause?
The users lack write permissions on the SharePoint list.
The 'Access denied' error when submitting new items in a canvas app connected to a SharePoint list indicates that the user lacks write permissions on the underlying data source. Even though the app is shared with the user, the SharePoint list itself enforces its own permission model. Without Contribute or Edit permissions on the list, the user cannot create new items, resulting in the generic access denied error.
A business analyst creates a model-driven app using Dataverse. They need to ensure that when a new lead is created, a task is automatically assigned to the sales team. Which component should be used?
A Power Automate flow triggered on lead creation
A Power Automate cloud flow triggered on Dataverse lead creation can automatically create and assign a task record to the sales team. This is the standard low-code automation approach in the Power Platform for cross-table actions triggered by record events. Business rules cannot create task records in another table.
A company wants to automate sending a welcome email to new employees after they are added to a SharePoint list. Which type of trigger should be used in the Power Automate flow?
When an item is created - SharePoint
The 'When an item is created - SharePoint' trigger is the correct choice because it initiates the flow automatically whenever a new item (in this case, a new employee record) is added to the specified SharePoint list. This event-driven trigger eliminates the need for manual intervention, making it ideal for automating the welcome email process immediately upon creation.
You have a Power Automate flow that sends an email notification when a new file is added to a SharePoint document library. Users report that emails are not being sent for some files. What is the most likely cause?
A trigger condition is filtering out some files
Trigger conditions in Power Automate allow you to define expressions that must evaluate to true for the flow to run. If a condition is configured to filter out certain files (e.g., based on file name, metadata, or size), those files will not trigger the flow, and no email will be sent. This is the most likely cause when emails are missing for some files but not all.
You are designing a Power Automate flow to approve expense reports. The flow must allow managers to approve or reject directly from the email notification without signing in. Which action should you use?
Start and wait for an approval
The 'Start and wait for an approval' action is specifically designed to send an approval request via email or the Power Automate mobile app, and it allows recipients to approve or reject directly from the email notification without needing to sign in, using adaptive cards or lightweight approval buttons. This meets the requirement for manager approval without authentication.
A flow fails with the error: 'GatewayTimeout'. The flow connects to an on-premises SQL Server via a data gateway. What is the most likely cause?
The on-premises data gateway is not running or unreachable
The 'GatewayTimeout' error indicates that the flow successfully reached the on-premises data gateway but the gateway did not respond within the expected time frame. This typically occurs when the gateway service is not running, the machine hosting the gateway is offline, or network connectivity between the gateway and the SQL Server is broken. Incorrect credentials or missing tables would produce different errors (e.g., 'Login failed' or 'Invalid object name').
A sales team wants to track customer interactions and automate follow-up emails without custom development. What Microsoft Power Platform component should they use?
Power Automate
Power Automate is the correct choice because it enables the sales team to create automated workflows that trigger follow-up emails based on customer interactions, such as when a new contact is added or a meeting ends. It integrates with common data sources like Dynamics 365, SharePoint, or Outlook, and uses prebuilt connectors to send emails without any custom code.
Your organization uses Power Automate to automate business processes. A flow that runs daily fails intermittently with 'HTTP 429 - Too Many Requests' errors. What should you do to resolve this issue?
Configure retry policies with exponential backoff in the flow actions.
HTTP 429 responses indicate the flow is hitting Power Automate's service protection limits (throttling). The correct mitigation is to configure retry policies with exponential backoff on the actions that call the throttled connector, so the flow retries after increasing delays instead of failing immediately. This aligns with Microsoft's documented guidance for handling 429 errors.
Your organization has a Power Apps portal that allows external users to submit support tickets. You need to ensure that only authenticated external users from specific domains can access the portal. What should you configure?
Configure the portal to use Microsoft Entra ID authentication and set up domain restrictions.
Power Apps portals can be configured to use Microsoft Entra ID (formerly Azure AD) as the identity provider, and within the portal settings you can restrict sign-in to users from specific domains. This ensures that only authenticated external users whose email domain matches the allowed list can access the portal, meeting the requirement without relying on IP filtering or obscurity.
Your organization has multiple Power Platform environments. You need to ensure that a specific connector (e.g., SQL Server) is blocked in the production environment but allowed in the development environment. What should you configure?
Create a data loss prevention (DLP) policy and assign it to the production environment.
Data loss prevention (DLP) policies in Power Platform allow administrators to classify connectors as Blocked, Business Data Only, or No Business Data Allowed. By creating a DLP policy and assigning it to the production environment, you can specifically block the SQL Server connector in that environment while leaving it available in the development environment, which is not assigned the same policy.
Your organization uses Power Virtual Agents (now Copilot Studio) for customer service. You need to ensure that the bot can access customer data from a Dataverse table that contains sensitive information. What is the best approach to secure the data?
Assign appropriate security roles and field-level security to the bot's service principal.
Power Virtual Agents (Copilot Studio) uses a service principal to authenticate with Dataverse. By assigning appropriate security roles and field-level security to that service principal, you can grant the bot granular, least-privilege access to only the necessary customer data, ensuring sensitive information is protected while still enabling the bot to function.
A company wants to create a custom copilot that answers employee questions about IT policies. The copilot must use existing SharePoint documents as a knowledge source. Which feature of Microsoft Copilot Studio should the company use?
Add a knowledge source
The 'Add a knowledge source' feature in Microsoft Copilot Studio allows you to connect a copilot to existing SharePoint document libraries, enabling it to retrieve and answer questions based on the content of those documents. This is the direct mechanism for grounding a custom copilot with enterprise content without requiring additional development.
A company has deployed a custom copilot built with Microsoft Copilot Studio. Users report that the copilot sometimes provides outdated information. The knowledge sources are SharePoint sites and public websites. The copilot uses Generative AI to formulate answers. What should the administrator do to improve the accuracy of the copilot's responses?
Refresh the knowledge sources periodically
The copilot's knowledge sources (SharePoint sites and public websites) are not automatically refreshed in real time. By periodically refreshing these sources, the administrator ensures the copilot's generative AI has access to the most current content, directly addressing the issue of outdated information.
A company is using Microsoft Copilot Studio to build a copilot for employee onboarding. The copilot must authenticate users to provide personalized information. The company uses Microsoft Entra ID (now Microsoft Entra ID) for identity management. Which authentication method should the administrator configure in Copilot Studio?
Microsoft Entra ID (Azure AD) authentication
Microsoft Entra ID (Azure AD) authentication is the correct choice because the company uses Microsoft Entra ID for identity management, and Copilot Studio natively supports this authentication method to provide personalized, authenticated experiences. This allows the copilot to verify user identities via OAuth 2.0 and OpenID Connect, enabling access to user-specific data and context during onboarding.
A company wants to extend their existing copilot built with Copilot Studio to trigger a workflow when an employee requests time off. The workflow must create a record in a Dataverse table and send an approval email. What should the copilot developer use?
Add a Power Automate flow as a plugin
Copilot Studio allows extending a copilot's capabilities by adding a Power Automate flow as a plugin. This enables the copilot to trigger a workflow that creates a record in a Dataverse table and sends an approval email, directly fulfilling the requirement without needing to embed an app or use AI Builder.
The PL-900 flashcard bank covers all 5 official blueprint domains published by Microsoft. Cards are distributed proportionally, so domains with higher exam weight have more cards.
Domain Coverage
Demonstrate the capabilities of Power Apps
Demonstrate the capabilities of Power Automate
Describe the business value of Microsoft Power Platform
Manage the Microsoft Power Platform environment
Demonstrate the capabilities of Microsoft Copilot Studio
Both flashcards and practice questions are evidence-based study tools. The difference is in what they train:
Flashcards — concept retention
Best for memorising definitions, acronyms, protocol behaviours, command syntax, and conceptual distinctions. Use flashcards to build the foundational vocabulary that PL-900 questions assume you know.
Best in: weeks 1–3
Practice tests — application
Best for applying concepts to realistic scenarios, eliminating distractors, and building exam stamina.PL-900 questions test scenario reasoning — not just recall — so practice tests are essential.
Best in: weeks 3–6
The most effective PL-900 study plan combines both: use flashcards for the first 2–3 weeks to build conceptual foundations, then shift to practice tests and mock exams in the final 2–3 weeks to apply and benchmark that knowledge. Most candidates who pass on their first attempt use both tools.
Yes. Courseiva provides free PL-900 flashcards across all official exam domains. Every card includes the correct answer and a full explanation of why it is right and why the distractors are wrong. The platform also includes topic-based practice, mock exams, and readiness tracking — no account required.
Courseiva has 701+ original PL-900 flashcards across all 5 exam blueprint domains. New cards are added regularly as the question bank grows. All cards are checked against the official Microsoft exam objectives, with editorial oversight from an experienced network and security engineer.
Courseiva flashcards are purpose-built for IT certification exams. Unlike generic flashcard platforms where content quality varies, every Courseiva card is mapped to the official PL-900 exam blueprint, written by engineers who hold the certification, and includes a full explanation of the correct answer and why the distractors are wrong. This explanation quality is what separates genuine learning from rote memorisation.
Courseiva is a web platform — an internet connection is required. For offline study, we recommend creating free Courseiva account, using the platform in your browser, and using your device's offline capabilities if your browser supports offline web apps.
Save your results, see which domains need more work, and get spaced repetition recommendations — all free.
Sign Up FreeFree forever · Every certification included